Server Browse List missing

Bug #1926119 reported by Axis Mann
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
samba
Unknown
Unknown
samba (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

smbclient -NL localhost doesn't show other linux or windows computers from the workgroup in the column below server on the smbclient report generated using the -L option.

The report indicates that the browse Master is on another computer. That other computer has resources to share. At a minimum, the list should show the master and the localhost in the server column. But it doesn't do that like it use to do in older releases. Surprisingly, the Files program shows all the computers in the workgroup. I tried using bcast by removing wins from hosts: in nsswitch.conf and the name resolve order = in smb.conf but that had no effect.
Version: 2:4.7.6+dfsg~ubuntu-0ubuntu2.21
Description: Ubuntu 18.04.5 LTS
Release: 18.04

I expected to see

Server
------
Neptune
Pluto
PIServer
...
Mimas

Workgroup Master
--------- -------
WORKGROUP PISERVER

linux computers on the smbclient report under the server heading which are all running samba and offering shares or services.

Instead, no other servers are being reported under the server heading. I would expect as a minimum that PIServer and Neptune (the localhost) would show up since both Neptune and PISERVER are sharing services and PIServer is recognized as the master.

ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: smbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.21
ProcVersionSignature: Ubuntu 5.4.0-72.80~18.04.1-generic 5.4.101
Uname: Linux 5.4.0-72-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.23
Architecture: amd64
CurrentDesktop: ubuntu:GNOME
Date: Mon Apr 26 00:31:16 2021
InstallationDate: Installed on 2020-07-25 (275 days ago)
InstallationMedia: Ubuntu 18.04.4 LTS "Bionic Beaver" - Release amd64 (20200203.1)
ProcEnviron:
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SambaClientRegression: Yes
SourcePackage: samba
UpgradeStatus: No upgrade log present (probably fresh install)

CVE References

Revision history for this message
Axis Mann (axismann) wrote :
Revision history for this message
Axis Mann (axismann) wrote :

Here's a copy of the report generated on the localhost by command smbclient -NLlocalhost

Revision history for this message
Axis Mann (axismann) wrote :

Here's a copy of the smb.conf file from the localhost

Revision history for this message
Athos Ribeiro (athos-ribeiro) wrote :

Hi Axis,

Thanks for the detailed bug report :)

I did some digging into the issue. Here are my findings so far:

The feature is no longer supported for newer (safer) SMB protocol versions. See [1].

This issue was reported upstream (and eventually dropped) on [2], which originated from [3] where the issue is described with more details.

The regression was introduced in this upstream commit [4]. The relevant code was refactored later in [5].

While patching the code downstream may have security implications (I will bring this to upstream), a workaround exists:

run with the reported command with the following option

$ smbclient -NL localhost --option 'client use spnego = no'

Alternativelly, in the general section in smb.conf set

  client use spnego = no

For newer versions (verified in samba 4.14), you should also set the protocol. For instance

$ smbclient -NL localhost --option 'client use spnego = no' --option 'client max protocol = NT1'

Note that the "use spnego" option is deprecated since samba 4.13, and will be removed [6] (I will also bring this up upstream).

Finally, it is worth to mention that the changes which introduced this regression are related to known vulnerabilities. See [7] and [8] for further reference.

[1] https://bugzilla.samba.org/show_bug.cgi?id=12863
[2] https://bugzilla.samba.org/show_bug.cgi?id=12061
[3] https://bugzilla.samba.org/show_bug.cgi?id=11849#c14
[4] e72ad193a53e20b769f798d02c0610f91859bd38
[5] 5b8ed5009bb4868c1391841193a3911fb0681cb5
[6] https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html#CLIENTUSESPNEGO
[7] https://www.samba.org/samba/security/CVE-2016-2110.html
[8] https://www.samba.org/samba/security/CVE-2016-2111.html

Changed in samba (Ubuntu):
assignee: nobody → Athos Ribeiro (athos-ribeiro)
status: New → Confirmed
Revision history for this message
Athos Ribeiro (athos-ribeiro) wrote :

I initiated contact with upstream through https://bugzilla.samba.org/show_bug.cgi?id=12061

Changed in samba (Ubuntu):
assignee: Athos Ribeiro (athos-ribeiro) → nobody
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.